Security Advisory
CVE-2019-18871
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.